Pranay Shah profile photo 1 on Tal

Pranay Shah

Product @ Harness - Supply Chain Security

Bengaluru

15+ years of work experience

Harness
Aug 20242 yrs 1 moPresent

Harness
Aug 20213 yrs 1 moAug 2024

- Enhanced CI/CD pipeline security through seamless integration of security tools, fostering stronger development practices and enabling shift left security. Leveraged GCP and Kubernetes to further bolster pipeline security. - Implemented security scanners as integral components of PR checks. - Pioneered the automation of monitoring alerts for secrets and Vulnerabilities, enhancing overall security measures. - Adeptly hardened Docker images while meticulously maintaining base images for optimized security protocols and FIPS enablement. - Integral in shaping secure architecture decisions and conducting comprehensive threat modeling workshops, strengthening risk assessment. - Enhanced software supply chain security by attentively attesting images, generating SBOM (Software Bill of Materials), SLSA compliance and vigorously enforcing compliance with established policies. - Proven expertise in Vulnerability assessment, Penetration testing, and manual Vulnerability analysis. - Drove the training initiatives within the Product Security domain, offering hands-on experience with various tools to new team members. - Managed and led the Bug Bounty Program
SAP Labs India
Jul 20174 yrs 2 mosAug 2021

Bangalore Urban, Karnataka, India

Larsen & Toubro Infotech Ltd.
Nov 20142 yrs 9 mosJul 2017

Bengaluru Area, India

My Responsibilites include - Performing Vulnerability Assessment and Penetration testing for Web Applications - Performing Security Testing for Mobile Applications(Android & iOS) - Performing Source Code Review - Imparting Security testing training to the new recruits - Preparing RFP’s for projects - Compiling reports based on standards as per the client - Providing recommendation and fixes for the Vulnerabilities reported.
Feb 20113 yrs 7 mosAug 2014

Coimbatore, Tamil Nadu, India

Pranay’s AI Stack

claude
claude
cursor
cursor
mcp
mcp
windsurf
windsurf
claudecode
claudecode
Figma Make
Figma Make

Education

SNS College of Technology

Bachelor’s Degree, Computer Engineering

SNS College of Technology

20104 yrs2014

High School, Computer Science

Stanes higher Secondary school

199614 yrs2010

Join Pranay and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Pranay Shah on Tal

Headline

Product @ Harness - Supply Chain Security

About

I am a seasoned security professional with 11+ years of experience across VAPT, vulnerability management, security tooling, and supply chain security. Currently, I serve as a Staff Product Manager at Harness, where I focus on building Supply Chain Security solutions that safeguard software from code to deployment. With a strong foundation in both technical and product leadership, I am passionate about advancing secure software practices and helping teams build with confidence.

Location

Bengaluru

AI stack

claude

cursor

mcp

windsurf

claudecode

Figma Make

Work experience

Staff Product Manager at Harness, Aug 2024 - Present · 2 yrs 1 mo

Staff Product Security Engineer at Harness, Aug 2021 - Aug 2024 · 3 yrs 1 mo, - Enhanced CI/CD pipeline security through seamless integration of security tools, fostering stronger development practices and enabling shift left security. Leveraged GCP and Kubernetes to further bolster pipeline security. - Implemented security scanners as integral components of PR checks. - Pioneered the automation of monitoring alerts for secrets and Vulnerabilities, enhancing overall security measures. - Adeptly hardened Docker images while meticulously maintaining base images for optimized security protocols and FIPS enablement. - Integral in shaping secure architecture decisions and conducting comprehensive threat modeling workshops, strengthening risk assessment. - Enhanced software supply chain security by attentively attesting images, generating SBOM (Software Bill of Materials), SLSA compliance and vigorously enforcing compliance with established policies. - Proven expertise in Vulnerability assessment, Penetration testing, and manual Vulnerability analysis. - Drove the training initiatives within the Product Security domain, offering hands-on experience with various tools to new team members. - Managed and led the Bug Bounty Program

Product Security Engineer Specialist at SAP Labs India, Jul 2017 - Aug 2021 · 4 yrs 2 mos, Bangalore Urban, Karnataka, India

Security Analyst at Larsen & Toubro Infotech Ltd., Nov 2014 - Jul 2017 · 2 yrs 9 mos, Bengaluru Area, India, My Responsibilites include - Performing Vulnerability Assessment and Penetration testing for Web Applications - Performing Security Testing for Mobile Applications(Android & iOS) - Performing Source Code Review - Imparting Security testing training to the new recruits - Preparing RFP’s for projects - Compiling reports based on standards as per the client - Providing recommendation and fixes for the Vulnerabilities reported.

Event Coordinator at Trio Event Managers, Feb 2011 - Aug 2014 · 3 yrs 7 mos, Coimbatore, Tamil Nadu, India

Education

Bachelor’s Degree, Computer Engineering, SNS College of Technology

High School, Computer Science, Stanes higher Secondary school